Reference manual template
Contents
1. EE NIE 28 5 4 1 CCID transport protocol eeeeue eee aaa aaa nn nn nne 28 5 4 2 Automatic PPS for the contactless Interface 29 Commands description 30 6 1 Generic APD Uli a abadi gaaja dis si aa disk GUAN 30 6 14 Get UD Command 2 dz sa sb d rga taam stabi a t k a gas 30 6 1 2 Escape command APDU ctt eer irre t epe cre ERE e akta 32 6 2 Set of APDU for contactless storage user oke 33 6 2 1 STORAGE CARD CMDS READ DINADN nman nanan naan nanana wana eene 33 6 2 2 STORAGE CARD CMDS WRITE BINARY seen 35 6 2 3 STORAGE CARD CMDS LOAD KEN 37 6 2 4 STORAGE CARD CMDS AUTHENTICATE seen 38 6 2 5 STORAGE CARD CMDS VALUE BLOCK sese enne 40 6 3 Set of APDU for ISO IEC14443 4 user tokens esses 41 BT TSC Command tri dod NK NAA LAAL 41 06 3 2 TEGLU ercomma d e viet vaca ect congre ada a aee o aeneus 42 6 4 Set of APDU defined by SCM Microsystems essseessessseessrnsrrsrnsrnernssrnssrnssrnsns 43 6 4 1 MIFARE DESFire Commande llana 43 6 5 Escape commands for the contactless interface 44 6 5 1 Sending escape commands to SDIO11 ssssssssssssseeeee 44 6 5 2 Escape command coles 44 6 5 8 READER GETCARDINFO enne nennen nnns tnn enne 45 6 5 4 READER LED CONTROL BY FW 46 6 5 5 READER LEDCGONTROL eaa aa a aaa 46 6 5 0 READER CNTLESS GET MFRC REV 1 4 eene 46 6 5 7 READER CNTLESS GET ATS2. SCardControl CardHandle IOCTL CCID ESCAPE amp InWord InBufLen amp OutByte 1 amp ResLen ret SCardDisconnect CardHandle SCARD RESET CARD ret SCardConnect ContextHandle ReaderName 0 SCARD SHARE SHARED SCARD PROTOCOL TO SCARD PROTOCOL T1 amp CardHandle amp ActiveProtocol get actual 848KBPS status ON OFF InBufLen 2 InWord CCID GET 848KBPS STATUS ret SCardControl CardHandle IOCTL CCID ESCAPE amp InWord InBufLen amp OutByte 1 amp ResLen printf Nn Get 848KBPS status 1x 2x ret OutByte Reader 0 dwCurrentState SCARD STATE UNAWARE Reader 0 dwEventState SCARD STATE UNAWARE SDIO11 REFERENCE MANUAL 64 Reader 0 szReader ReaderName 0 ret SCardGetStatusChange ContextHandle MINTIMEOUT Reader 1 printf nATR for i20 i lt Reader gt cbAtr i printf 2x Reader gt rgbAtr i printe Nisas gt oe Sea Soe Sea oe SS oe Saas ret SCardDisconnect CardHandle SCARD RESET CARD else printf An SCardConnect failed with 0x 81X ret ret SCardReleaseContext ContextHandle else printf Nn SCardEstablishContext failed with 81X ret printf npress any key to close the test tool n getch SDIO11 REFERENCE MANUAL 65 7 3 Annex C SCM Proprietary CLA bytes Contact Memory cards MIFARE TCL Switching T CL User command Escape command APDU The second SCM Proprietary AP
3. communication to outline usage recommendations in order to ensure best user experience SDIO11 is a contactless reader designed to communicate with user tokens User tokens are made of a contactless integrated circuit card connected to an antenna User tokens can take several form factors User tokens e Credit card sized smart card e Key fob e NFC mobile phone etc Communication between SDIO11 and user tokens uses magnetic field inductive coupling SDI011 The magnetic field generated by SDIO11 has a carrier frequency of 13 56MHz 3 5 1 Power supply When the user token is put in the magnetic field of the reader its antenna couples with the reader and an induction current appears in the antenna thus providing power to the integrated circuit The generated current is proportional to the magnetic flux going through the antenna of the user token 3 5 2 Data exchange The carrier frequency of the magnetic field is used as a fundamental clock signal for the communication between the reader and the card It is also used as a fundamental clock input for the integrated circuit microprocessor to function To send data to the user token the reader modulates the amplitude of the field There are several amplitude modulation and data encoding rules defined in ISO IEC 14443 The reader should refer to the standard for further details To answer to the reader the integrated circuit card of the user token modulates its way of loa
4. 3 Product version corresponding to the manual Item Version Windows 5 19 Contact Driver Windows 5 20 Contactless Driver MAC driver 5 0 16 LINUX Driver 5 0 16 SDIO11 REFERENCE MANUAL 10 Definition of various terms and acronyms 2 4 e REN CNN DR Divider receive used to determine the baud rate between the readertothecard Group of 4 bits 1 digit of the hexadecimal representation of a byte Example 0xA3 is represented in binary as 1010001 1 b The least significant nibble is 0x3 or 0011 b and the most significant nibble is OxA or 1010 b Proximity Coupling Device PC SC Personal Computer Smart Card software interface to communicate between a PC and a smart card PID AN SDIO11 REFERENCE MANUAL 11 2 5 References Doc ref in Description the manual ISO IEC 7816 Identification cards Integrated circuit 3 cards Part 3 Cards with contacts Electrical interface and transmission protocols ISO IEC 7816 Identification cards Integrated circuit s cards with contacts Part 4 Interindustry commands for interchange ISO IEC 7816 4 1995 E ISO IEC Identification cards Contactless 14443 3 integrated circuit s cards Proximity cards Part 3 Initialization and anti collision ISO IEC Identification cards Contactless integrated 14443 4 circuit s cards Proximity cards Part 4 Transmission protocol ISO IEC 14443 4 2001 E PC SC Interoperability Specification for
5. 67 7 4 2 Bottom Casing Biereg Suaces Color Block AMG 757 Tetu Miror Glossy Fini SDIO11 REFERENCE MANUAL 68 7 4 3 Stand Apply to all surfaces Color Block PMS 757 Texture VDI 24
6. SW12 9000 OK DataOut 08 24 64 97 4 byte s ATR length 13 ATR 3B 88 80 01 00 00 00 00 73 81 93 00 68 ISO14443 4B APDU FF CA 00 00 00 SW12 9000 OK DataQut FO 2C FF FF 4 byte s ATR length 20 ATR 3B 8F 80 01 80 4F OC 40 00 00 03 06 03 00 02 00 00 00 00 69 MIFARE 4K APDU FF CA 00 00 00 SW12 9000 OK DataOut D4 49 86 7F 4 byte s ATR length 20 ATR 3B SF 80 01 80 4F OC 40 00 00 03 06 03 00 03 00 00 00 00 68 MIFARE Ultralight APDU FF CA 00 00 00 SW12 9000 OK DataOut 04 E4 C3 D9 5B 02 80 7 byte s R SDIO11 REFERENCE MANUAL 32 6 1 2 Escape command APDU 6 1 2 1 Description This command can be used to send escape commands to SDIO11 For description of escape commands please refer to the dedicated chapter in this manual 6 1 2 2 Format CLA INS P1 P2 P3 Data in Lc is the length of the escape command s input buffer See escape commands description later in this manual 6 1 2 3 Response Output buffer of the escape command 6 1 2 4 Example To get the ATS or ATQB of the ISO14443 4 based user token you can use this APDU to send the READER CNTLESS GET ATS ATQB 0x93 escape command ATR length 14 ATR 3B 89 80 01 80 67 04 12 BO 03 02 01 00 49 Type A passport APDU FF CC 00 00 01 93 SW12 9000 OK DataOut OE 78 33 C4 02 80 67 04 12 BO 03 02 01 00 14 byte s ATR length 13 ATR 3B 88 80 01 00 00 00 00 73 81 93 00 66 SW12 9000 OK DataOut 50 76 49 FF FF 00
7. Sample code using escape commands through Escape IOCTL 60 7 3 Annex C SCM Proprietary CLA bytes aaa 65 7 4 Annex D Mechanical drawings TAA Top Casing isis diee S een end epis a Ma 7 4 2 Bottom Casing 7 4 3 Stand SDIO11 REFERENCE MANUAL 1 Legal information 1 1 Disclaimers The content published in this document is believed to be accurate SCM Microsystems does not however provide any representation or warranty regarding the accuracy or completeness of its content and regarding the consequences of the use of information contained herein If this document has the status Draft its content is still under internal review and yet to be formally validated SCM Microsystems reserves the right to change the content of this document without prior notice The content of this document supersedes the content of previous versions of the same document The document may contain application descriptions and or source code examples which are for illustrative purposes only SCM Microsystems gives no representation or warranty that such descriptions or examples are suitable for the application that the reader may want to use them for Should you notice problems with the provided documentation please provide your feedback to support scmmicro com 1 2 FCC 1 2 1 Section 15 21 Information to user Changes or modifications not expressly approved by the party responsible for compliance could void the user s author
8. about SDIO11 aaa aaa aaa aaa aaa aaa aaa aaa aaa enne nnns 13 Sul SDIOTikey bongga ERO AA Aa tee at ae 13 3 2 SDI011 key features 13 3 3 SDI011 ordering information eeeeeeee eee aaa aaa aaa aaa aaa aaa aaa aaa aaa nennen 14 3 4 SDIO11 customization optons ada 14 3 5 Contactless communication principles and SDIO11 usage recommendations 15 35 A ptu ek eerte tae t ie aaa ds 15 3 5 2 Bata exchange ein RE Ent pere ERE Pepe du Na 15 3 5 3 R commendalions uc nre it ee per dert PANG ie rta deb TRAE 16 3 6 eeler te IN EE 17 bet IA S 17 3 6 2 Applications provided by SCM Microsystems eeseeseeseeeeesieeseeeseerreerreneneene 17 SDIOTA characteristics SAS AA daf a add 18 4 1 SDI011 high level architecture eee uazie 18 dill Bock dagan cse bene cette tea dioit 18 4 1 2 Software architetture usce ce en rite tee etie neon nasa a ae vasa adie 19 42 Quick reference dalan eae ANG NGA AA 20 424 SDIOUI GIMENSIONS 2c i 46s iet Galen inion ee eee en Fn t Rn k 20 42 2 EED BehaVlora dare A ate eie eet e aen 21 4 2 3 Other dala entro e GINANG KAN ENNA Re ERR exea denen tess 22 Software Modules aka OP ede rias 24 ila A ss vas tinte ceci KAN a aste erts ec ede ER WO 24 5 2 Bi 24 5 9 D 1 AY T aha EE 24 539341 DIO list a ve Bete a ee eed sis 24 5 3 2 Supported operating evetems aa 25 5 3 8 PC SC 2 0 compliant ATR for contactless interface a 25
9. status not satisfied Referenced key not usable Key type not known SDIO11 REFERENCE MANUAL 6 2 4 5 Example For a MIFARE Classic 1K card which has the following memory mapping SCM Smartcard Commander File Settings Help Hardware d System e 501011 Dual Interface Reader Be SDIO11 Dual Interface Reader M Mifare Standard EB ATR BE CPU card Mifare Standard Cardtype Mifare Standard Memory size 1024 Bytes Unique ID E2 79 B9 1E H Block Block Sector Hex ASCII Write Inc 2222 2222 2222 2772 2222222222222222 0404 EDDD ASSA sii f YZYZ A B AJB A1B2 ESF6 BBCC DDEE 1086 L j 1Yi AIS AJ B 0102 0506 1314 1516 AIP AIP SE TREE PEPE EVER FIA OIS 2222 SCFF OOFF F2F2 7265 F1F1 ASSA D3F7 8069 FFFF FFFF m VID Bytes Key R Access Bits Data Bytes Internal Bytes Key B General Purpose Bytes Read Only Bytes Reading sector 0 or sector 1 of this card requires authentication with key A or key B The following example e authenticates with key A of sector 1 e reads block 6 e authenticates against sector 3 e reads block E APDU FF 82 00 60 06 FF FF FF FF FF FF Sw 12 9000 OK APDU FF 86 00 00 0501 0006 60 00 SW 12 9000 OK APDU FF BO 0006 10 SW 42 9000 OK DataDut 01 0203 0405 06 07 0809 10 11 12 13 14 45 16 16 byte s APDU FF 82 00 60 05 D3 F7 D3 F7 D3 F7 SW 12 9000 OK APDU FF 86 00 00 0501 000E 6000 SW 12 9000 OK APDU FF BO DO DE 10 Sw 12 9000 OK Da
10. 00 00 00 73 81 93 12 byte s To get the reader status about support of 848Kbps you can use this APDU to send the READER CNTLESS 848KBPS 0x9D escape command By default the SDIO11 doesn t have 848Kbps enabled on its contactless interface the following sequence e Checks the status 0x00 as response means 848Kbps is disabled e Enables 848Kbps e Checks the status again and the answer 0x01 indicates 848Kbps is enabled ATR length 13 ATR 3B 88 80 01 00 00 00 00 73 81 93 00 68 APDU FF CC 00 00 02 9D FF Sw12 9000 OK DataOut 00 1 byte s APDU FF CC 00 00 02 9D 01 SW12 9000 OK APDU FF CC 00 00 02 9D FF X SW12 9000 OK DataOut 01 1 byte s SDIO11 REFERENCE MANUAL 33 6 2 Set of APDU for contactless storage user tokens 6 2 1 STORAGE CARD CMDS READ BINARY 6 2 1 1 Description Using this APDU application can read a memory block on user tokens based on technologies like MIFARE Classic 1K or 4K block size Ox10 bytes or MIFARE Ultra light block size 0x04 bytes 6 2 1 2 Format CLA INS P1 P2 Le OxFF OxBO Address Address OxXX MSB LSB e P2 indicates the block number from where to read e Le can be a short maximum value 255 or extended maximum value 65535 If Le 0x00 then all the bytes until the end of the block are read 0x10 bytes for MIFARE Classic 1K or 4K cards and 0x04 bytes for MIFARE Ultra Light cards 6 2 1 3 Response Data Out Data SW1 SW2 6 2 1 4 Status words De
11. 16 4 6 3 1 3 Status Words Description See ISO IEC 7816 4 As defined in ISO IEC 7816 4 6 3 1 4 Example The following APDU sequence reads the first 256 bytes of the data group 1 as specified in ICAO LDS logical data structure for machine readable travel documents with open access It first selects the issuer application using its AID OxAO 0x00 0x00 0x02 0x47 0x10 0x01 then selects the DG1 file 0x01 0x01 and then does a read binary APDU 00 A4 04 OC 07 A0 00 00 02 47 1001 SW12 9000 OK APDU 00 A4 02 OC 02 01 01 SW12 9000 OK APDU 00 BO 00 00 00 5W12 9000 OK DataOut 61 5B SF 1F 58 50 3C 55 54 4F 45 52 49 4B 53 53 4F 4E 3C 3C 41 4E 4E 41 3C 4D 41 52 49 41 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 4C 38 39 38 39 30 32 43 3C 3 SDIO11 REFERENCE MANUAL 42 6 3 2 T CL user command Description This command can be used to send raw data to the user token 6 3 2 1 Format Data CLA INS P1 P2 P3 6 3 2 2 Response Data Out PICC response data SW1 SW2 6 3 2 3 Status Words Description User should refer to the status words defined by the PICC manufacturer for a description of the status words 6 3 2 4 Example Let s consider the Select command defined in ISO7816 4 This command being ISO can be sent to the user token in 2 different ways e Using the T CL command e Using the T CL user command Here are the 2 answers for the select command ATR length 14 ATR 3
12. 443 A part 3 T10 T11 0002 Card name Mifare Standard 4K Card name Mifare Ultra light T12 00 RFU RFU T13 00 RFU RFU Ti4 00 RFU RFU 115 00 RFU RFU Checksum Checksum SDIO11 REFERENCE MANUAL 27 5 3 3 2 ATR for ISO IEC 14443 4 user tokens The user token exposes its ATS or application information which is mapped to an ATR The table describes how this mapping is done Byte Value Designation Description E SL NEN n indicates the number of historical bytes in following ATR 0x80 Nibble8 indicates no TA2 TB2 TC2 Nibble 0 means T 0 0x01 Nibble8 indicates no TA3 TB3 TC3 Nibble 1 means T 1 4 3 n Historical Type A the historical bytes from the ATS up to 15 bytes bytes application Type 18 bytes information Byte 0 through 3 application data from ATQB Byte 4 through 6 protocol info byte from ATQB Byte 7 highest nibble is the MBLI maximum buffer length index from ATTRIB lowest nibble is OxO Example of the ATR built for an ISO14443 4 user tokens Type A SCM Smartcard Commander FEER SCM Smartcard Commander File Edit Settings Help File Edit Settings Help Hardware Hardware System W System EE SDI011 Dual Interface Reader SDIO11 Dual Interface Reader Electronic Passport BR Electronic Passport jara e J CPU card 34 CPU card W SDI011 Dual Interface Reader ke 3D 011 Dual Interface Reader ATS 3B 89 80 01 4A 43 4F 50 33 31 56 32 32 44 3B 88 80 01 00 00 00 00 73 81 93 00 68 B
13. ATOR sese eee 47 6 5 8 READER CNTLESS GET TYPE eene nens 47 6 5 9 READER CNTLESS SET TYPE 7 47 6 5 10 READER CNTLESS RF GWITCH nennen 48 6 5 11 READER CNTLESS RAW CEO 48 6 5 12 READER CNTLESS RAW XMIT EN sesseseesseesseessisssrrssnssrrrsrrnssrnssrnssrnssrnsens 49 6 5 13 READER CNTLESS DISABLE DR 50 6 5 14 READER SWITCH RF ON OFF 7 4 reen 50 6 5 15 READER CNTLESS 848KBPS 1 iaren iiaiai e iaiia aiaiai 51 6 5 16 READER CNTLESS BAUDRATE sse nennen nnne 52 6 5 17 READER CNTLESS FORCE BAUDRATE PCSOC REWV2 sees 53 6 6 Escape commands for the contact interface aaa 54 6 6 1 Sending escape commands to SDIO11 ssssssssssssseeeee 54 6 6 2 Escape command coles 54 6 6 3 RBEADER SETMQODBE 0 i preme da i e RENE t dis r da 54 GPA READER GETMOBE 5 eite One i ME de dus aaa aj 55 6 6 5 READER APDU TRANSFER sss enses nennen renis 55 6 6 0 READER SWITCH SPEED esses esses awa ewa aaa nennen nnns trn 56 6 6 7 READER SWITCH PROTODQCOL sees enne 56 GER READER DISABLE PPS rat dap asa re dee diede ye ove n cetus 57 6 6 9 READER GETIFDTYPE marinie erem tret diia 57 6 6 10 READER GETINFO ESXTEND D sese nennen nnne nenas 58 O euo siete onde NAMANA mio Se saad ahead tage L EA US bees a 59 7 1 Annex A Status words table nennen ener nnne 59 7 2 Annex B
14. B 89 80 01 4D 54 43 4F 53 73 01 01 01 3C APDU 00 44 00 00 SW12 9000 OK APDU FF FE 00 00 04 00 A4 00 00 5w12 9000 OK The T CL command is nevertheless more useful for sending commands which are not defined in ISO7816 SDIO11 REFERENCE MANUAL 43 6 4 Set of APDU defined by SCM Microsystems 6 4 1 MIFARE DESFire Commands Description This command can be used to send commands to DESFire based user tokens For a description of DESFire commands please contact NXP Semiconductors 6 4 1 1 Format CLA INS P1 P3 Data P2 Response Data Out DESFire response data 9000 if the DESFire response data is of single byte DESFire response data if the DESFire response data is more than 1 byte SDIO11 REFERENCE MANUAL 6 5 Escape commands for the contactless interface 6 5 1 Sending escape commands to SDIO 1 1 A developer can use 2 methods to send escape commands to SDIO11 to the contactless interface e SCardControl method defined in PC SC API e SCardTransmit method defined in PC SC API in conjunction with the escape command APDU defined earlier in this manual 6 5 2 Escape command codes Escape commands can be used by an application to configure SDIO11 to function in a mode that is not its default configured mode or to get specific information To put the SDIO11 back into its default mode either the SDIO11 has to be unplugged and plugged again or the application can send again the same escape command The
15. CCs and Personal PC SC Workgroup Computer Systems v2 01 CCID Specification for Integrated Circuit s Cards Interface Devices 1 1 Issuer ISO IEC ISO IEC ISO IEC ISO IEC USB IF Universal Serial Bus Specification 2 0 USB IF SDIO11 REFERENCE MANUAL 12 2 6 Conventions Bits are represented by lower case b where followed by a numbering digit Bytes are represented by upper case B where followed by a numbering digit Bit number 5 Y Bit number 0 w b7 b6 b5 b4 b3 b2 b1 bo lt 4 Most significant nibb ie J9 lt Least significant nibble gt 1 Byte 8 bits 2 nibbles 9 Byte number 2 al Byte number 11 Es lt String of 12 bytes Example 163 decimal number is represented e in hexadecimal as OxA3 H in binary as 10100011 b The least significant nibble of OxA3 is 0x3 in hexadecimal o 0011 b in binary The most significant nibble of xA3 is OxA in hexadecimal 1010 b in binary SDIO11 REFERENCE MANUAL 13 3 General information about SDIO1 1 3 1 SDI011 key benefits With its combination of a modern slim design and its state of the art feature set SDI011 is the perfect desktop reader choice for environments where both contact and contactless smart card support is required Such environments may be corporate where physical and logical access cont
16. DU is blocked for the application layer This is used for internal communication i e between the driver and the firmware Function CLA byte PC SC1 0 CLA byte PC SC2 0 T CL User Command APDU OxFC OxFF MIFARE DESFire APDU OxFC OxFF Escape Command APDU OxFD OxFF In order to maintain compatibility with some customer applications which use the CLA bytes of PC SC 1 0 architecture the following switching mechanism can be used Option1 Use the CLA byte of PC SC1 0 architecture Option2 Use the CLA byte of PC SC2 0 architecture The above two options can be controlled by e Configuring the firmware e NF registry entry e Vendor IOCTL By default option 2 is set in the firmware binary The entry System CurrentControlSet Services SCM ProprietaryAPDUOption is kept disabled in the INF by default Enabling this key and setting this entry to O will override the firmware setting with option 1 Enabling this key and setting this entry to 1 will override the firmware setting with option 2 Vendor IOCTL_SWITCH_PROPRIETARY_APDU_OPTION 0x856 can also be used to switch between the two options Input buffer with value 0x00 will switch to option 1 and input buffer with value 0x01 will switch to option 2 SDIO11 REFERENCE MANUAL 66 7 4 Annex D Mechanical drawings 7 4 1 Top Casing Color Matalo SG Temo Miror Glossy teg Color Metallic Ever Texture Mince Cosy Finit SDIO11 REFERENCE MANUAL
17. Data in CLA INS P1 P2 Lc OxFF OxD6 Address Address OxXX Data MSB LSB Where e P2indicate the memory block number where data should be written e Lc 0x10 for MIFARE Classic 1K 4K Lc 0x04 for MIFARE Ultralight 6 2 2 3 Response Data Out SW1 SW2 6 2 2 4 Status Words SW1 SW2 Description 0x90 NO ERROR Command not supported State of the non volatile memory unchanged 6 2 2 5 Example For a MIFARE Classic Ultralight card which has the following memory content Issuing the command SDIO11 REFERENCE MANUAL 36 SCM Smartcard Commander DER File Settings Help Hardware 4 System Bi 501011 Dual Interface Reader M Mifare Ultralight ff NFC Tag EB ATR BE CPU card V SDI011 Dual Interface Reader Mifare Ultralight Cardtype Mifare Ultralight Memory size 64 Bytes Unigue ID 04 A8 B1 00 00 00 00 ld Block Hex 3 E110 7777 67C0 676C OTP Bytes Internal Bytes Data Bytes Lock Bits Read Only Bytes APDU FF D6 00 08 04 EE EE EE EE S42 9000 OK Results into the following memory mapping SCM Smartcard Commander BAR File Settings Help Hardware System SDI011 Dual Interface Reader Mifare Ultralight BS NFC Tag HB ATR BE CPU card W SDI011 Dual Interface Reader Mifare Ultralight Cardtype Mifare Ultralight Memory size 64 Bytes Unique ID 04 A8 B1 00 00 00 00 td Block Hex 0040 E110 7777 67CO 676C 6672 EEEE 0000 UID Bytes OTP Bytes Internal Bytes Da
18. N Get current field state After the RF is turned off to turn the RF ON again card connect shall be done in direct mode If B1 of the input buffer is 0x00 or 0x01 the output buffer is Output buffer NULL If B1 of the input buffer is OXFF the output buffer is a BYTE buffer with 2 possible values Switch RF Field OFF Output buffer Description PF field is OFF 6 5 11 READER CNTLESS RAW CFG This escape command switches SDIO11 to raw mode When SDIO11 is in raw mode it only polls for one type of contactless card SDIO11 is by default not in this mode and therefore READER CNTLESS RAW XMIT EX would fail The input buffer contains 2 bytes Byte Value Description BO 0x97 Escape Function code B1 0x00 Type A wil be use for further transmissions in raw mode 0x01 Type B wil be use for further transmissions in raw mode The output buffer is Output buffer NULL Once SDIO1 1 is in raw mode commands can be sent using READER CNTLESS RAW XMIT EX escape command SDIO11 REFERENCE MANUAL 49 6 5 12 READER CNTLESS RAW XMIT EX This escape command can only be executed by the firmware once SDIO11 is put in raw mode using the READER CNTLESS RAW CFG escape command This escape command can be used to send commands to smart card when SDIO11 is in raw mode The input buffer is Byte Value Description To oa NN NN B2 KA Is CRC required Bat econ B3 B4 Card Type 0 Type A The outp
19. PC to RDR Mechanical e PC to RDR SetDataRateAndClockFrequency 5 4 1 3 CCID Error Codes Extensive error codes are reported on many conditions during all CCID responses Most of the error messages are reported by the CCID appropriately Some of the main error codes for the contact interface are e HW ERROR e XFR PARITY ERROR SDIO11 REFERENCE MANUAL 29 e BAD ATR TS e BAD ATR TCK e ICC MUTE The following sub sections discuss when and why these error codes are returned 5 4 1 3 1 HW ERROR This error code is returned when a hardware short circuit condition is detected during application of power to the card or if any other internal hardware error is detected This error code has been defined in the error code table 6 2 2 of the CCID specification 5 4 1 3 2 XFR PARITY ERROR This error code is returned when a parity error condition is detected This error will be reported in the response to a PC to RDR XfrBlock message This error code has been defined in the error code table 6 2 2 of the CCID specification 5 4 1 3 3 ICC MUTE This error code is returned when the card does not respond until the reader time out occurs This error will be reported in the response to PC to RDR XfrBlock message and PC to RDR IccPowerOn messages This error code has been defined in the error code table 6 2 2 of the CCID specification 5 4 2 Automatic PPS for the contactless interface Automatic PPS is implemented in SDI011 s driver This m
20. The ASIC embeds flash memory The flash is programmed during the manufacturing of SDI011 devices This flash contains the firmware developed by SCM Microsystems to handle all the 1807816 contact protocol the RF communication protocols and the PC SC communication protocol with the host The flash can be upgraded once the device is deployed in the field hence enabling firmware upgrades to add and potentially patch features The RF front end ensures the coding decoding framing modulation demodulation required for the RF communication It is controlled by the device controller through registers The matching circuitry provides the transmission and receiver paths adaptation for the antenna to function properly SDI011 REFERENCE MANUAL 19 4 1 2 Software architecture Applications can interface with the driver directly through the PC SC interface Contactless Contact Reader Reader PC SC Layer Upper Driver Contactless Card Reader Lower Driver Contact Smart Card Reader FIRMWARE LAYER The SDIO11 driver implements PC SC v2 0 API towards upper layers and uses SCM firmware commands encapsulated in CCID like protocol for the contactless slot and full CCID for the contact slot The SDIO11 contactless driver handles all the contactless related intelligence i e ISO IEC 14443 and the SDIO11 firmware handles the raw transport of data to and from the contactless cards SDIO11 REFERENCE MANUAL 20 4 2 Quick referen
21. ce data 4 2 1 SDIO11 dimensions Item Characteristic Value Weight 128 Grams External dimensions L 118 mm x W 78mm x H 22mm Cable length 1 5 meter long with USB type A connector Default color Black with metallic silver SDIO11 SD TTE gt BAR CODE TYPE 124 Default label TVA ARRON T I ri E SN KO Drawing with dimensions of the SDIO11 and accessories can be found in annex SDIO11 REFERENCE MANUAL 21 4 2 2 LED behavior SDI011 is equipped with a bicolor LED Its behavior is described in the table below SDIO11 states LED Indication LED2 Indication GREEN RED Just after plug in with drivers ON OFF already installed Just after DFU operation ON OFF Suspend standby OFF OFF Reader powered Contact card IN but not powered 98 ME issue power down using the Testresman AU zd OFF utility 500ms Reader powered Contact card IN but not powered 2K XP power down takes place ON OFF Reader powered Contactless card IN but not 500ms ON 500ms ON powered 98 ME issue power down using the 500ms OFF 500ms OFF Testresman utility Reader powered Contactless card IN but not powered ON ON 2K XP power down takes place Ee 500ms ON Contact card powered communication 500ms OFF OFF Contactless card powered communication 500ms ON 500ms ON 500ms OFF 500ms OFF 100ms ON Reader card errors OFF 100ms OFF Firmware upgrade running OFF ON 3 500ms ON Combi card
22. command code B1 Disable Auto PPS Enable Auto PPS The output buffer is Output buffer NULL 6 5 14 READER SWITCH RF ON OFF This escape command can be used to switch the RF field ON or OFF when a Contact smart card is inserted into the reader By default the RF field is always in the ON state and when any contact smart card is inserted in the reader the RF field is turned OFF The input buffer shall contain 2 bytes Byte Value Description Escape command code B1 0x00 Switch RF Field OFF when contact card is present in the reader 0x01 Let RF Field ON when contact card is present in the reader OxFF Get current field state when Contact smart card is present in the reader After the RF is turned off to turn the RF ON again card connect shall be done in direct mode SDIO11 REFERENCE MANUAL 51 If B1 of the input buffer is 0x00 or Ox01 the output buffer is Output buffer NULL If B1 of the input buffer is OXFF the output buffer is a BYTE buffer with 2 possible values Output buffer Description RF field is OFF 6 5 15 READER_CNTLESS 848KBPS This escape command can be used to enable disable 848kbps support by SDIO11 as well as query whether 848kbps is currently enabled or disabled by SD1011 The RF communication with a user token will only switch to 848Kbps provided the user token supports this baud rate and provided automatic PPS is ON The input buffer shall contain 2 bytes Byte Value Descrip
23. d between the reader and the card it is recommended to place the user token as close as possible to the reader This will increase the amount of energy supplied to the user credential which will then be able to use its microprocessor at higher speeds Ci SDIO11 REFERENCE MANUAL 17 3 6 Applications 3 6 1 General SDIO11 is a transparent reader designed to interface a personal computer host supporting PC SC interface with 13 56MHz user tokens like public transport cards contactless banking cards electronic identification documents e g e passports e ID cards driving licenses etc Those user tokens can have several form factors like credit cards key fobs NFC mobile phones or USB dongles like SCT3511 that SCM Microsystems markets USB link RF link 13 56MHz PC SC interface 15014443 interface gt DN AUG ERA ke J N US 1 A S Host Tokens SD1011 Application logic User personal data for given set of applications Application logic Interface device SDIO11 itself handles the communication protocol but not the application related to the token The application specific logic has to be implemented by software developers on the host 3 6 2 Applications provided by SCM Microsystems SCM Microsystems does not provide payment or transport applications SCM Microsystems provides a few applications for development and evaluation purposes that can function with SDIO11 There are ma
24. ding impedance the field generated by the reader Here also further details can be found in ISO IEC 14443 In the ISO IEC 14443 standard the reader is called the proximity coupling device PCD In the ISO IEC 14443 standard the user token is called proximity integrated chip card PICC SDIO11 REFERENCE MANUAL 16 3 5 3 Recommendations The communication between the reader and the user token is sensitive to the presence of material or objects interfering with the magnetic field generated by the reader The presence of conductive materials like metal in the vicinity of the reader and the user token can severely degrade the communication and even make it impossible The magnetic field of the reader generates Eddy or Foucault s currents in the conductive materials the field is literally absorbed by that kind of material It is recommended for proper communication to avoid putting SDIO11 in close GS proximity of conductive materials The presence of multiple user tokens in the field also interferes with the communication When several user tokens are in the field of the reader load of the field increases which implies that less energy is available for each of them and that the system is detuned For this reason SCM Microsystems has implemented in its driver only 1 slot by default This means that in the event several user tokens are in the field of the SDIO11 only one will be active It is possible using INF configuration to enabl
25. e up to 4 slots i e to activate up to 4 user tokens nevertheless depending on the power consumption of the user tokens communication cannot be guaranteed GS It is recommended to present only one user credential at a time in front of SDI011 Please note that multiple contactless slots feature is supported but is kept disabled by default The SDIO11 driver on configuration allows the presence and use of several PICCs maximum 4 at the same time The driver can support multiple logical connections and present each of them as a slot logical device to the Resource Manager and higher components Also the simultaneous working of multiple Contactless cards is not guaranteed and depends on the antenna size and the power requirements of the card The communication between the reader and the user token is sensitive to the geometry of the system reader user token Parameters like the geometry and specially the relative size of the reader and user token antennas directly influence the inductive coupling and therefore the communication SDIO11 was primarily designed and optimized to function with user credentials of various technologies having the size of a credit card It may happen that SDIO11 is not capable of communicating with extremely large or extremely small antennas In order to optimize the coupling between the reader and the user token it is recommended to put both antennas as parallel as possible In order to optimize transaction spee
26. eans that by default SDI011 switches to the maximum communication speed indicated by the card during its selection Automatic PPS can be disabled using escape messages as explained later in this manual When Auto PPS is disabled discussed in escape messages section the reader works at the default baud rate of 106kbps An escape command has been introduced in the driver to force the required baud rate The maximum speed supported by SDIO11 is 424Kbps by default Using escape messages as explained later in this manual it is possible to change this SDIO11 REFERENCE MANUAL 30 6 Commands description 6 1 Generic APDU 6 1 1 Get UID Command 6 1 1 1 Description GET UID will retrieve the UID or SNR or PUPI of the user token This command can be used for all supported technologies 6 1 1 2 Format CLA INS P1 P2 Setting Le 0x00 can be used to request the full UID or PUPI is sent back e g for ISO14443A single 4 bytes double 7 bytes triple 10 bytes for ISO14443B 4 bytes PUPI 6 1 1 3 Response Data Out UID SW1 SW2 6 1 1 4 Status Words SW1 SW2 Description 0x90 0x00 NO ERROR 0x62 0x82 End of UID reached before Le bytes Le is greater than UID length 0x6C OxXX Wrong Length OxXX is the exact value for Le Further error codes can be found in annex SDIO11 REFERENCE MANUAL 31 6 1 1 5 Examples ATR length 14 ATR 3B 89 80 01 80 67 04 12 BO 03 02 01 00 49 ISO14443 4A APDU FF CA 00 00 00
27. ed applications SDIO11 REFERENCE MANUAL e You MAY NOT copy or distribute parts of or the entire source code without prior written consent from SCM Microsystems e You MAY NOT combine or distribute the source code provided with Open Source Software or with software developed using Open Source Software in a manner that subjects the source code or any portion thereof to any license obligations of such Open Source Software If the document contains technical drawings related to SCM Microsystems products they are provided for documentation purposes only SCM Microsystems does not grant you any license to its designs 1 4 Trademarks MIFARE is a registered trademark of NXP Semiconductors BV Windows is a trademark of Microsoft Corporation SDIO11 REFERENCE MANUAL 2 Introduction to the manual 2 1 Objective of the manual This manual provides an overview of the hardware and software features of the SDIO11 dual interface contactless and contact reader hereafter referred to as SDIO11 This manual describes in details interfaces and supported commands available for developers using SDIO11 in their applications 2 2 Target audience This document describes the technical implementation of SDIO11 The manual targets software developers It assumes knowledge about 13 56 MHz contactless technologies like ISO IEC 14443 and commonly used engineering terms Should you have questions you may send them to support scmmicro com 2
28. following escape commands are supported by SDIO11 for the contactless interface Escape command Code READER CNTLESS GET MFRC REV READER CNTLESS GET ATS ATQB READER CNTLESS GET TYPE READER CNTLESS SET TYPE READER CNTLESS RF SWITCH READER CNTLESS RAW CFG READER CNTLESS RAW SMIT EX READER CNTLESS DISABLE PPS READER SWITCH RF ON OFF READER CNTLESS 848KBPS READER CNTLESS BAUDRATE READER CNTLESS FORCE BAUDRATE PCSC REV2 READER LEDCTRL BY FW Sample code to send escape commands can be found in annex 44 SDIO11 REFERENCE MANUAL 45 6 5 3 READER GETCARDINFO This escape command is used to get information about the card placed on the reader The SDIO11 returns an error if no card is placed on it The input buffer shall contain the escape command code Input buffer The output buffer contents are described below Output buffer Value Description Contactless card present Baud rate of card reader communication B2 OxXY X Upper nibble indicates 0 memory card 1 T CL card 2 Dual mode card Y Lower nibble indicates 0 Type A card 1 Type B card The Baud rate of card reader communication OxNN shall indicate a BYTE as follows b8 b7 b6 b5 b4 b3 b2 b1 0 b1 212kbps supported direction reader to card b2 424kbps supported direction reader to card b3 848kbps supported direction reader to card b5 212kbps supported direction card to
29. he firmware capabilities of the reader and the Unicode serial number The output buffer shall point to an application allocated SCARD READER GETINFO PARAMS EX structure mentioned below The input buffer is typedef struct SCARD READER GETINFO PARAMS EX OUT BYTE byMajorVersion OUT BYTE byMinorVersion OUT BYTE bySupportedModes O 1507816 1 EMV 2 Memory card OUT WORD wSupportedProtocols 1 T0 2 T 1 3 T 0 amp T 1 OUT WORD winputDevice OUT BYTE byPersonality OUT BYTE byMaxSlots OUT BYTE bySerialNoLength OUT BYTE 28 bySerialNumber JSCARD READER GETINFO PARAMS EX PSCARD READER GETINFO PARAMS EX SDIO11 REFERENCE MANUAL 59 7 Annexes 7 1 Annex A Status words table Description INVALID INSTRUCTION BYTE CLASS NOT SUPPORTED NO INFORMATION GIVEN CLASS BYTE INCORRECT 0x69 0x82 Command not allowed security status not satisfied FUNCTION NOT SUPPORTED WRONG PARAMETER P1 P2 SDIO11 REFERENCE MANUAL 60 7 2 Annex B Sample code using escape commands through Escape IOCTL File Name T hbr H ifdef cplusplus extern endif File VOID incl incl incl incl incl incl incl define define define define define endif Gr A IOCTL CCID ESCAPE SCARD CTL CODE 0xDAC CCID GET 848KBPS STATUS OxFF9D CCID SET 848KBPS ON 0x019D CCID SET 848KBPS OFF 0x009D MINTIMEOUT 300 ifdef cplusplus Name T hbr CPP lude ude
30. he output buffer contains the version of the MFRC531 ASIC SDIO11 REFERENCE MANUAL 47 6 5 7 READER CNTLESS GET ATS ATQB This escape command enables the host to retrieve the ATS for Type A T2 CL or the ATQB for Type B cards The input buffer contains the escape command code Input buffer 0x93 The output buffer contains the ATS bytes or the ATQB bytes depending on the type of PICC placed on the reader 6 5 8 READER CNTLESS GET TYPE This escape command retrieves the type of the card which SDIO11 is configured to poll for The input buffer shall contain the escape command code Input buffer The output buffer shall point to a BYTE buffer which will contain the type value coded as Value Description Type A type B 6 5 9 READER_CNTLESS_SET_TYPE This escape command configures the type of cards SDIO11 will poll for Using this command can improve the polling efficiency of SDIO11 for applications where only type A or only type B cards are expected The default is Type A type B 0x02 The input buffer shall contain 2 bytes Byte Value Description eo fo Escape commandos The output buffer is Output buffer NULL SDIO11 REFERENCE MANUAL 48 6 5 10 READER CNTLESS RF SWITCH This escape command can be used to retrieve set the RF state of SDIO1 1 The default RF field state is ON The input buffer shall contain 2 bytes Byte Value Description Escape command code Switch RF Field O
31. iceosystems SCM Microsystems Reference Manual version 1 05 SDI011 Dual interface contactless and contact stationary reader Reference manual SDIO11 Dual Interface Contactless and Contact Stationary Reader SCM Microsystems Oskar Messter Strasse 13 85737 Ismaning Germany Phone 49 89 9595 5000 Fax 49 89 9595 5555 Document history Date Version Description of change 08 09 2010 Initial Version 05 11 2010 Pictures update Typo and minor corrections 14 02 2010 Typo and minor corrections Contact information http Awww scmmicro com products services smart card readers terminals contactless dual interface readers html For sales information please email sales scmmicro com Table of Contents 1 3 4 5 Legal informoatlor iile opi in doe i rie x Reach 7 1 1 Ee Eet GEN 7 152 Ce E M 7 1 2 1 Section 15 21 Information to user 7 1 22 Section 15 105 D icc A adie adie ie rtu oue 7 Te LICENSES D tems 7 ia Trademarks uisi esi Rude smettere ni taies 8 Introd ction to the manual iei ertet rette A eter tette eere ches 9 SCT Objective ofthe manual nic eee ee o eda rede He ieee 9 PAASA EC CC 9 2 3 Product version corresponding to the manual se 9 2 4 Definition of various terms and acromvms eene emnes 10 2 5 References ivi utere eru Ete Pere t ii UE Ye REAPER LA edi 11 2 6 CONVENTIONS TAE EET 12 General information
32. ity to operate the equipment 1 2 2 Section 15 105 b Note This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help 1 3 Licenses If the document contains source code examples they are provided for illustrative purposes only and subject to the following restrictions e You MAY at your own risk use or modify the source code provided in the document in applications you may develop You MAY distribute those applications ONLY in form of compil
33. lots Ejection mechanism Contactless interface Value Description ISO IEC 14443 4 PICC type A and type B MIFARE Type B memory card PICC through SCM proprietary APDU 848 Kbps Supported and is kept disabled by default Allows the presence and use of several PICC s Maximum 4 at the same time The driver can support multiple logical connections and present each of them as a slot logical device to the Resource Manager and higher components Also the simultaneous working of multiple Contactless cards is not guaranteed and depends on the antenna size and the power requirements of the card Contact interface Value Description 500Kbps Class A and Class AB smart cards Class B only cards not supported Synchronous smart cards Yes SDIO11 REFERENCE MANUAL 24 5 Software modules 5 1 Installation SCM provides an installer for Windows and for Mac The installers can be used to install the driver as well as some utilities 5 2 Utilities The following utilities are available e A tool for device firmware upgrade DFU e A tool for testing the installation of the PC SC driver e A tool for testing the resource manager e A tool called PC SC Diag capable of providing basic information about the reader and a card through PC SC stack The DFU utility comes with a specific driver for dynamic Device Firmware Upgrade DFU through the USB interface Operating systems supported by DFU tool e Windows 98 e Windows ME e Wi
34. m the reader about the speed change occurred between application and card The first byte will contain the escape function value the next two bytes contain Fi and Di respectively The output buffer field shall be NULL The input buffer is ses Escape command code Ed a The output buffer is NULL 6 6 7 READER SWITCH PROTOCOL In case when the application is capable of switching the card s protocol through APDU if the card support such a feature this escape command is used to inform the reader about the protocol change occurred between application and card The input buffer is 0X01 T1 PROTOCOL The output buffer is NULL SDIO11 REFERENCE MANUAL 57 6 6 8 READER_DISABLE_PPS This escape command disables the automatic PPS done by the firmware The input buffer is ses Escape command code 0X01 Disable PPS The output buffer is NULL 6 6 9 READER GETIFDTYPE This escape command is used to get the current IFD type from the reader The first byte of the input buffer contains the escape id value The reader gets the value from the reader capability structure which is implemented in the reader as a configurable item The output buffer shall point to a WORD buffer The IFD type of SDIO11 Generic is 0x010E The input buffer is SDIO11 REFERENCE MANUAL 58 6 6 10 READER GETINFO EXTENDED This escape command is used to get the information of the reader like the major and minor version of t
35. ndle SDIO11 REFERENCE MANUAL 62 MINTIMEOUT Reader 1 printf nATR for i20 i lt Reader gt cbAtr i printf 2x Reader gt rgbAtr i printf An sco5o99559953595055955 5550995395 aashaeshaeshaas in enable 848KBPS ON printf nEnable 848kbps InBufLen 2 InWord CCID SET 848KBPS ON ret SCardControl CardHandle IOCTL CCID ESCAPE amp InWord InBufLen amp OutByte 1 amp ResLen ret SCardDisconnect CardHandle SCARD RESET CARD ret SCardConnect ContextHandle ReaderName 0 SCARD SHARE SHARED SCARD PROTOCOL TO SCARD PROTOCOL T1 amp CardHandle amp ActiveProtocol get actual 848KBPS status ON OFF InBufLen 2 InWord CCID GET 848KBPS STATUS ret SCardControl CardHandle IOCTL CCID ESCAPE amp InWord InBufLen amp OutByte 1 amp ResLen SDIO11 REFERENCE MANUAL 63 printf Nn Get 848kbps status 1x 2x ret OutByte Reader 0 dwCurrentState SCARD STATE UNAWARE Reader 0 dwEventState SCARD STATE UNAWARE Reader 0 szReader ReaderName 0 ret SCardGetStatusChange ContextHandle MINTIMEOUT Reader 1 nATR printf yes for i lt Reader gt cbAtr 1 07 i printf 8 2x Reader gt rgbAtr i printf Mn A Disable 848Kbps OFF printf nDisable 848KBPS InBufLen 2 InWord CCID SET 848KBPS OFF ret
36. ndows 2000 GG e Windows 2003 Server 32 amp 64 bit e Windows XP 32 amp 64 bit e Windows Vista 32 amp 64 bit e Windows Server 2008 32 amp 64 bit 5 3 Driver 5 3 1 SDIO11 listing SDIO11 is listed by PC SC applications as e SCM Microsystems Inc SDI011 Smart Card Reader for the contact reader e SCM Microsystems Inc SDIO11 Contactless Reader for the contactless reader SDIO11 REFERENCE MANUAL 25 5 3 2 Supported operating systems Operating systems supported by the driver e Windows 2000 e Windows 2003 Server 32 amp 64 bit oS e Windows XP 32 amp 64 bit e Windows Vista 32 amp 64 bit e Windows Server 2008 32 amp 64 bit 5 3 3 PC SC 2 0 compliant ATR for contactless interface When a user token is placed on the reader initialization anti collision is done The user token is automatically activated and an ATR is built as defined in the PC SC specification SDIO11 REFERENCE MANUAL 26 5 3 3 1 ATR for contactless storage user tokens The ATR of the user token is composed as described in the table below In order to allow the application to identify the storage card properly it s Standard and Card name describing bytes must be interpreted according to the Part 3 Supplemental Document maintained by PC SC Tokens using technology like MIFARE are examples of such user tokens Byte Value Designation Description n indicates the number of historical bytes in following ATR Nibble 8 indicate
37. ny tools provided here are two of them e The NFC forum tag reader writer is a standalone application that enables the user to read and write NFC forum compliant records into NFC forum compatible tags It is an easy to use tool to configure rapidly NFC forum tag demonstrations Note SDI011 supports NFC forum tag type 2 and 4 only e Smart card commander version 1 1 provides NFC forum record parsing functionality of NDEF records in XML format as well as scripting functionality which can be very useful for developers to develop and debug their applications This tool can be used for both the contact and the contactless interfaces of SDIO11 SDIO11 REFERENCE MANUAL 18 4 SD1011 characteristics 4 1 SD1011 high level architecture 4 1 1 Block diagram The link between SDIO11 and the host to which it is connected is the USB interface providing both the power and the communication channel 1807816 contact smart card interface To host STC2 ASIC SCM with h arap embedded flash MFRC531 NXP Matching circuitry i LED Device controller B RF front end EMC filter Antenna SDIO11 has a device controller which is SCM s STCII ASIC This ASIC has several interfaces available In SDIO11 implementation 3 peripherals are connected to the device controller e LED for reader status indication e A contact smart card interface e An HF front end that handles the RF communication
38. ommand The following escape commands are supported by SDI011 for the contact interface Escape command READER APDU TRANSFER READER SWITCH SPEED READER SWITCH PROTOCOL READER DISABLE PPS READER GETIFDTYPE READER GETINFO EXTENDED OX1E 6 6 3 READER_SETMODE This escape command may be used to set the mode of the reader Applications may call this function to set the desired mode Typically this call is used to switch between the EMV 1507816 and the memory card modes of operation The input buffer is Escape command code ISO 7816 mode EMV mode Memory card mode The output buffer is NULL SDIO11 REFERENCE MANUAL 55 6 6 4 READER GETMODE This escape command may be used to retrieve the current mode of the reader The input buffer is The output buffer is Memory card mode 6 6 5 READER APDU TRANSFER This escape command may be used to exchange an APDU with the smart card The input buffer is Escape command code The output buffer contains the response APDU The maximum number of bytes that can be transmitted and received is given below Transmit Case 1 2 3 APDU Max of 256 bytes per APDU Case 4 APDU Max of 255 bytes per APDU Receive Max of 259 bytes per APDU SDIO11 REFERENCE MANUAL 56 6 6 6 READER SWITCH SPEED In case when the application is capable of switching the card s speed through APDU if the card supports such a feature this escape command is used to infor
39. powered in contact Slot 500ms OFF OFF 500ms ON 500ms ON Combi card powered using RF field 500ms OFF 500ms OFF 3 A combi card is a smart card which has both a contact and a contactless interface Some of those cards have one controller with two interfaces Data can be accessed through the contact or the contactless interface For those when the contact interface is powered up the contactless interface is disabled There are nevertheless in the market combi cards with 1 contact chip and 1 contactless chip Those cards can be seen at the same time as a contact and a contactless card when inserted in the contact interface of SDI011 SDIO11 REFERENCE MANUAL 22 4 2 3 Other data 4 2 3 4 General Parameter Value Description Clock of the device 24 MHz controller PC SC 2 0 Operating temperature 0 to 50 C range Operating humidity M i Up to 95 RH non condensing Certifications 4 2 3 2 USB Parameter Value Description High bus powered SDIO11 draws power from USB bus Voltage 5V Max Current 300mA Suspend current 380uA DC characteristics WP PD KSB SDIO11 REFERENCE MANUAL 23 4 2 3 3 Parameter RF carrier frequency Modulation ID1 format tokens supported Maximum baud rate Multiple PICC in field 4 2 3 4 Parameter Smart card operating frequency Maximum supported card baud rate Cards supported ISO 7816 compliant EMV 2000 compliant CT API compliant Number of s
40. put buffer is Byte Value OxAD READER CNTLESS FORCE BAUDRATE PCSC REV2 This escape command can be used to force baud rate for Contactless cards Description Escape command code bO b1 b2 b3 b4 b5 b6 b7 DR 2 supported if bit is set to 1 DR 4 supported if bit is set to 1 DR 8 supported if bit is set to 1 shall be set to 0 1 is RFU DS 2 supported if bit is set to 1 DS 4 supported if bit is set to 1 DS 8 supported if bit is set to 1 1 if the same D is required for both communication directions b8 O if different D is supported for each communication direction NULL If B1 0x00 The output buffer is Output buffer NULL Apply the baud rate specified by the card B2 Encoding of the baud rate to be forced if B1 value is 0x01 No need to send this byte in case B1 has the value 2x00 SDIO11 REFERENCE MANUAL 54 6 6 Escape commands for the contact interface 6 6 1 Sending escape commands to SDIO 1 1 A developer can use the following method to send escape commands to SDIO11 for the contact interface e SCardControl method defined in PC SC API 6 6 2 Escape command codes Escape commands can be used by an application to configure SDIO11 to function in a mode that is not its default configured mode or to get specific information To put the SDIO11 back into its default mode either the SDIO11 has to be unplugged and plugged again or the application can send again the same escape c
41. reader b6 424kbps supported direction card to reader b7 848kbps supported direction card to reader b8 1 indicates same baud rate in both directions 0 indicates different baud rates in opposite directions For Example If OXNN 2 0x77 the card supports all baud rates namely 106 212 424 and 848 kbps in both directions This card can be forced to work at different baud rates in the send and receive directions using the escape command READER CNTLESS FORCE BAUDRATE PCSC REV2 If OXNN OxB3 the card supports 106 212 and 424 kbps in both directions This card can be made to work only at the same baud rate in the send and receive directions using the escape command READER CNTLESS FORCE BAUDRATE PCSC REV2 SDIO11 REFERENCE MANUAL 46 6 5 4 READER LED CONTROL BY FW This escape command may be used to enable or disable LED control by the firmware The input buffer is Byte Value Description Escape command code B1 Disable LED control by FW Enable LED control by FW The output buffer is Output buffer 6 5 5 READER LEDCONTROL This escape command is used to turn ON OFF the LED This escape command shall work only if LED control by firmware is disabled The input buffer shall contain 3 bytes Byte Value Description 6 5 6 READER_CNTLESS_GET_MFRC_REV This escape message retrieves the revision number of the RF ASIC MFRC531 The input buffer contains the escape command code Input buffer T
42. rol is implemented As for all SCM Microsystems products SDI011 is designed to offer best in class interoperability with various formats of tokens cards dongles watches or NFC mobile phones Its infield upgradeable firmware makes SDI011 a secure and future proof investment providing both flexibility and fast time to market for new applications as well as minimum risk linked to contactless technology standards evolution 3 2 SDI011 key features e 13 56MHz contactless reader o 18014443 type A amp B o MIFARE e SO7816 compliant contact smart card reader e PC SC v2 0 compliant e In field upgradeable firmware e Unique serial number which enables that SDI011 can be plugged into any USB slot on a PC without having to re install the driver SDIO11 REFERENCE MANUAL 14 3 3 SD1011 ordering information Part number SDIO11 905213 Contactless SDK SDK 905124 24 3 4 SD1011 customization options Upon request SCM can customize e The color of the casing e The logo e The product label e The USB strings Terms and conditions apply please contact your local SCM representative or send an email to sales scmmicro com SDIO11 REFERENCE MANUAL 15 3 5 Contactless communication principles and SDIO11 usage recommendations SDIO11 is a dual interface reader capable of reading both contact smart cards and contactless user tokens The following paragraph focuses on a few specifics of the contactless
43. s no TA2 TB2 TC2 D Nibble 0 means T 0 3 0x01 TD2 Nibble 0 indicates no TA3 TB3 TC3 TD3 Nibble 1 means T 1 A status indicator may be present in an optional TLV data object Optional TLV Tag Application identifier data object 1 byte Registered identifier on 5 bytes Proprietary identifier extension on 3 bytes 4 RFU bytes TCK XOR of all previous bytes Example of the ATR built for contactless storage tokens MIFARE Classic 4K MIFARE Ultralight SCM Smartcard Commander ER File Edit Settings Help Hardware System GV 501011 Dual Interface Reader M Mifare Ultralight SCM Smartcard Commander File Edit Settings Help Hardware System EE DI011 Dual Interface Reader M Mifare Standard m ES NFC Tag dE CPU card 7 CPU card W SDIO11 Dual Interface Reader W SDI011 Dual Interface Reader 3B 8F 80 01 80 4F OC 40 00 00 03 06 03 00 02 00 00 00 00 69 38 8F 80 01 80 4F OC A0 00 00 03 06 03 00 03 00 00 00 00 68 Byte Yalue hex Meaning Yalue hex Meaning TS 3B direct direct TO 8F 15 historical characters 15 historical characters TD1 80 protocol 0 protocol 0 TD2 01 protocol 1 protocol 1 Ti 80 Category indicator byte Category indicator byte T2 4F AID presence indicator AID presence indicator T3 oc Length of following data Length of Following data T4 T8 A0 00 00 03 06 RID PC SC Workgroup RID PC SC Workgroup T9 03 Card standard ISO 14443 A part 3 Card standard ISO 14
44. scription SW1 SW2 0x62 0x81 WARNING part of the returned data may be corrupted 0x82 WARNING end of file reached before Le bytes where read Security status not satisfied Command not allowed Function not supported File not found addressed blocks or bytes do not exist Wrong Le 0xXX is the correct value Command not supported SDIO11 REFERENCE MANUAL 34 6 2 1 5 Example For a MIFARE Classic 1K card which has the following memory content SCM Smartcard Commander File Settings Help Hardware d System SDI011 Dual Interface Reader M EMifare Standard HB ATR BE CPU card W SDI011 Dual Interface Reader Mifare Standard Cardtype Mifare Standard Memory size 1024 Bytes Unique ID E2 79 B9 1E H Sector Hex 222 0404 A1B2 0102 FFFF 2222 by bz UID Bytes Key A Internal Bytes Key B General Purpose Bytes ASCII 222222222222222 iif YZYZ A L j ifi 9999999999999999 Data Bytes Read Only Bytes Block Block Read Write A B AIP AJB AIP AIP AIP Block Key Dec Rea AIP AIP AIP To read the seventh block you have to issue the following command and get the following response APDU FF BO 00 06 10 SW12 9000 OK Data ut 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 16 bytes SDIO11 REFERENCE MANUAL 35 6 2 2 STORAGE CARD CMDS WRITE BINARY 6 2 2 1 Description This APDU writes data to a memory address 6 2 2 2 Format
45. ta Bytes Lock Bits Read Only Bytes SDIO11 REFERENCE MANUAL 37 6 2 3 STORAGE CARD CMDS LOAD KEYS 6 2 3 1 Description Some type of user tokens like MIFARE Classic may require that an authentication happens before any data can be read or written To perform this authentication keys need to be loaded in the reader s memory using this command 6 2 3 2 Format CLA INS Data in P1 P2 Lc Where P2 can have the following values please refer to MIFARE documentation from NXP for further details on what is key A and Key B e 0x60 to use the Key A e 0x61 to use the Key B 6 2 3 8 Response Data Out SW1 SW2 6 2 3 4 Status Words SW1 sw2 Description ee Reader key not supported SDIO11 REFERENCE MANUAL 38 6 2 4 STORAGE CARD CMDS AUTHENTICATE 6 2 4 4 Description This command enables to perform authentication for user tokens based on MIFARE Classic 1K or 4K Before this command can be successfully executed the STORAGE_CARD_CMDS_LOAD_KEY command must have been executed 6 2 4 2 Format CLA INS P1 or aao dao oo Where the data field is structured as follow Byte Value Description E 1 D 1 mem ei TI mem B3 Key A el sara Information about memory structure of MIFARE Classic must be requested from NXP Semiconductors 6 2 4 3 Response Data Out SW1 SW2 6 2 4 4 Status Words SW1 SW2 Description LLLLL LL L WARNING no further info 0x69 Security
46. taDut DE OE DEDE F1 F1F1F10E DE OE OE A5 SAAS SA 16 byte s SDIO11 REFERENCE MANUAL 40 6 2 5 STORAGE CARD CMDS VALUE BLOCK 6 2 5 1 Description This APDU is used to interact with MIFARE Classic e purse applications Please refer to MIFARE Classic documentation available from NXP Semiconductors for further details on MIFARE classic memory mapping and commands 6 2 5 2 Format CLA INS P1 P2 Le Data in Where P2 code the address of the block number addressed Where the data field is structured as follow Byte Value Description Block number ETA po Value LSB first 6 2 5 3 Response Data Out SW1 SW2 6 2 gt Status Words Description 6 2 5 DP CLA INS Data in The above APDU will increment the value in block number Ox1E of a MIFARE Classic based user token by a value of 0x01 SDIO11 REFERENCE MANUAL 41 6 3 Set of APDU for ISO IEC14443 4 user tokens 6 3 1 T CL Command Description SDIO11 can transfer directly ISO IEC7816 4 APDU to the PICC SDI011 supports user tokens that have both the MIFARE and T CL partitions Depending on the APDU sent by the host the reader switches to the corresponding mode MIFARE or T CL automatically and the command is processed accordingly 6 3 1 1 Format Description of the APDU commands can be found in ISO IEC 7816 4 specification 6 3 1 2 Response Data Out PICC answer as defined in ISO IEC 7816 44 SW1 SW2 As defined in ISO IEC 78
47. tion BO 0x9D Escape command code 5 If B1 of the input buffer is 0x00 or 0x01 then the output buffer is Output buffer NULL If B1 of the input buffer is OxFF the output buffer is a BYTE buffer with following possible values Output buffer Description 848Kbps is disabled 848Kbps is enabled SDIO11 REFERENCE MANUAL 52 6 5 16 READER CNTLESS BAUDRATE This escape command can be used to get the actual operating baud rate of card reader communication The input buffer shall contain the escape message value Input buffer The output buffer shall point to a BYTE buffer with following possible values Output buffer Description 106Kbps in both directions 106Kbps from PICC to PCD 212Kbps from PCD to PICC 106Kbps from PICC to PCD 424Kbps from PCD to PICC 106Kbps from PICC to PCD 848Kbps from PCD to PICC 212Kbps from PICC to PCD 106Kbps from PCD to PICC 212Kbps in both directions 212Kbps from PICC to PCD 424Kbps from PCD to PICC 212Kbps from PICC to PCD 848Kbps from PCD to PICC 424Kbps from PICC to PCD 106Kbps from PCD to PICC 424Kbps from PICC to PCD 212Kbps from PCD to PICC 424Kbps in both directions 424Kbps from PICC to PCD 848Kbps from PCD to PICC 848Kbps from PICC to PCD 106Kbps from PCD to PICC 848Kbps from PICC to PCD 212Kbps from PCD to PICC 848Kbps from PICC to PCD 424Kbps from PCD to PICC 848Kbps in both directions SDIO11 REFERENCE MANUAL 53 6 5 17 The in
48. ude lude ude ude lude mai lt windows h gt lt winbase h gt lt stdio h gt lt conio h gt winscard h winerror h T hbr H n VOID SCARDCONTEXT ContextHandle SCARDHANDLE CardHandle BYTE OutByte WORD InWord i DWORD ActiveProtocol ICC protocol ULONG InBufLen ResLen ULONG ret SDIO11 REFERENCE MANUAL 61 SCARD READERSTATE Reader 1 please add the name of the used reader here or use SCardListReaders to find the right reader name char ReaderName SCM Microsystems Inc SDI011 Contactless Reader 0 NULL kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk kkkkkkkkkkkkkkkkk ContextHandle 1 ret SCardEstablishContext SCARD SCOPE USER NULL NULL amp ContextHandle if ret SCARD S SUCCESS ret SCardConnect ContextHandle ReaderName 0 SCARD SHARE SHARED SCARD PROTOCOL TO SCARD PROTOCOL T1 amp CardHandle amp ActiveProtocol if ret SCARD S SUCCESS get actual 848kbps status ON OFF InBufLen 2 InWord CCID GET 848KBPS STATUS ret SCardControl CardHandle IOCTL CCID ESCAPE amp InWord InBufLen amp OutByte 1 amp ResLen printf Nn Get 848kbps status lx 2x ret OutByte Reader 0 dwCurrentState SCARD STATE UNAWARE Reader 0 dwEventState SCARD STATE UNAWARE Reader 0 szReader ReaderName 0 ret SCardGetStatusChange ContextHa
49. ut buffer contains the response to the command from the offset B6 onwards The following example uses the raw mode to send a REQB command First we have to switch the SDIO11 into raw mode for type B communication Byte Value Description BO 0x97 READER CNTLESS RAW CONFIG code Type B will be used Then we can send the following bytes to obtain the ATQB response of any type B user token in the field Byte Value Description OxAE READER_CNTLESS_RAW_XMIT_EX code FWI is set to 3 B2 0x01 Enable CRC CRC will be calculated by the RF front end of SDIO11 B3 0x00 Number of bits to be sent in the command 0 Entire byte will be sent Command length in bytes REQB command s anti collision prefix byte B7 0x00 REQB command s application family identifier B8 0x01 REQB command parameter with slot number set as 1 SDIO11 REFERENCE MANUAL 50 ATR Length 13 ATR 3b 88 80 01 00 00 14 e0 b3 81 91 00 Se APDU FF CC 00 0002 97 01 SW 12 9000 OK APDU FF CC 00 0009 AE 0301 0001 0305 0001 SW 12 9000 OK D ataDut 00 60 00 00 00 00 50 40 f5 16 ae 00 00 14 e0 b3 8191 9000 6 5 13 READER CNTLESS DISABLE PPS By default SDIO11 does automatic PPS i e it switches the RF communication speed to the highest possible supported by the card This escape command can be used to switch ON OFF automatic PPS When automatic PPS is OFF then 106Kbps only is available The input buffer is Byte Value Description Escape
50. yte Value hex Meaning Value hex Meaning TS 3B direct direct TO 89 9 historical characters 8 historical characters TD1 80 protocol 0 protocol 0 TD2 01 protocol 1 protocol 1 Historical Hex 44 43 4F 50 33 31 56 32 32 Historical Hex 00 00 00 00 73 81 93 00 Historical ASCII ICOP31 22 Historical ASCII ooogefls Qs 44 Checksum QS 68 Checksum SDIO11 REFERENCE MANUAL 28 5 4 Firmware 5 4 1 CCID transport protocol SDI011 implements a transport protocol that is compliant with USB Device Class Smart Card CCID Specification for Integrated Circuit s Cards Interface Devices Revision 1 10 for the contact smart card interface and CCID like transport protocol for the contactless interface This paragraph describes the CCID specification features that are implemented and those that are not implemented 5 4 1 1 CCID class requests supported e Abort 5 4 1 2 CCID messages supported The following CCID messages are supported both for the contact and the contactless interfaces when received through bulk out endpoint e PC to RDR lccPowerOn e PC to RDR lccPowerOff e PC to RDR GetSlotStatus e PC to RDR XfrBlock e PC to RDR GetParameters e PC to RDR SetParameters e PC to RDR Escape e PC to RDR Abort e PC to RDR NotifySlotChange The following CCID messages are NOT implemented and hence fail with command not supported error e PC to RDR ResetParameters e PC to RDR lccClock e PC to RDR TOAPDU e PC to RDR Secure e
Download Pdf Manuals
Related Search